Fraudsters Developed New ‘Phishing’ Methods

It turned out that the fraudsters defrauded the customers of two Germany-based financial companies with a new phishing method. Thanks to the new method, it was stated that the phishing messages sent by the fraudsters to the users were not caught in the measures taken to prevent such fraud cases.
 Fraudsters Developed New ‘Phishing’ Methods
READING NOW Fraudsters Developed New ‘Phishing’ Methods

Phishing, or otherwise known as ‘phishing tactic’, is commonly used by scammers to randomly steal data to individuals via e-mails that appear to be sent from known websites, banks, credit card companies, e-mail or internet service providers, It is a very dangerous method.

Recently, scammers seem to have developed new techniques to counter measures that prevent buyers from opening phishing messages. Here is one of these techniques; It was recently discovered by a cybersecurity firm, Cofense. Accordingly, it was revealed that the messages used in a campaign used QR codes to defraud users of Germany-based financial institutions Sparkasse and Volksbanken Raiffeisenbanken and to steal digital banking information.

QR code phishing messages are mostly undetected by anti-fraud measures

Carefully prepared and well-structured phishing messages; It usually involves many different tricks to fool buyers, such as asking them to approve data policy changes implemented by the bank or asking them to review new security procedures. Recipients who click on the link normally found in the phishing message are then redirected to the phishing landing page via Google’s feed proxy service “FeedBurner”; But this time things seem a little different.

Accordingly, in recent attacks, scammers began sending recipients QR codes instead of links, making it difficult for email filters to mark messages as malicious. In its latest analysis, Cofense said, “Phishing sites are quite similar. Users are first asked for their bank’s location or BLZ bank code, followed by the corresponding username and PIN. Once this information is provided, a download page prompts the user to wait for verification before displaying the login page once again. This time he warns that his credentials are wrong, this is a common phishing tactic.”

Comments
Leave a Comment

Details
146 read
okunma51230
0 comments